Apple iOS is prone to a local privilege-escalation vulnerability. The attackers running malicious code can exploit this issue locally to elevate their privileges. The successful attacks will completely compromise an affected device.

This iPhone kernel vulnerability discovered by comex and used in the limera1n and Greenpois0n jailbreaking tools. These tools exploit a BootROM vulnerability found by geohot to get initial code execution on the device, and comex’s kernel exploit is then used to make the jailbreak untethered, i.e to persist after a reboot.

This kernel vulnerability(CVE-2010-3830) was patched with the release of iOS 4.2.1 on November 22.